`ThrottlerModule` is configured globally at 100 req / 60s but auth endpoints need much tighter limits to prevent brute force. Apply `@Throttle()` decorator overrides: - `POST /auth/login` → 5 req / 60s - `POST /auth/register` → 3 req / 60s - `POST /auth/forgot-password` → 3 req / 300s **Files to modify:** `src/auth/auth.controller.ts`
ThrottlerModuleis configured globally at 100 req / 60s but auth endpoints need much tighter limits to prevent brute force.Apply
@Throttle()decorator overrides:POST /auth/login→ 5 req / 60sPOST /auth/register→ 3 req / 60sPOST /auth/forgot-password→ 3 req / 300sFiles to modify:
src/auth/auth.controller.ts